sqlite: prevent reentrant statement finalization from callbacks

[trivikr]

Version

main

Platform

macOS 26.5.2

Subsystem

sqlite

What steps will reproduce the bug?

import { DatabaseSync } from 'node:sqlite';

const db = new DatabaseSync(':memory:');

db.function('close_database', () => {
 console.log('callback: closing database');
 db.close();
 console.log('callback: database closed');
});

console.log('before query');
db.prepare('SELECT close_database()').get();
console.log('after query');

How often does it reproduce? Is there a required condition?

Always

What is the expected behavior? Why is that the expected behavior?

close() should reject or defer finalization while statement execution depth is non-zero; db.deserialize() should apply the same protection.

What do you see instead?

before query
callback: closing database
callback: database closed
Segmentation fault

db.close() finalizes the prepared statement while that same statement is executing inside sqlite3_step(), and the process subsequently crashes.

Additional information

No response

[trivikr]

The reentrant StatementSync finalization from callbacks also needs to be fixed

Repro

import { DatabaseSync } from 'node:sqlite';

const db = new DatabaseSync(':memory:');
const useDispose = process.argv[2] === 'dispose';

let statement;
db.function('finalize', () => {
 if (useDispose) {
 statement[Symbol.dispose]();
 } else {
 statement.close();
 }
});

statement = db.prepare('SELECT finalize()');
statement.get();

Run either variant

$ node repro.js
$ node repro.js dispose

Observed

Finalizing the currently executing statement through close() or Symbol.dispose causes a segmentation fault

Expected

The operation should throw ERR_INVALID_STATE while that statement is executing.

Additional Context

Noticed in #64796 (comment)

[trivikr]

Closing as:

• database.close() reject in callback was done in sqlite: prevent database close during callbacks #64743
• database.deserialize() reject in callback was done in sqlite: reject deserialize() while in a callback #64796
• Reentrant StatementSync finalization from callbacks will be fixed in sqlite: reject reentry into a running statement #65106 (issue being tracked in sqlite: reentrancy into a running statement from a user-defined function is unguarded #65102)